15Write a check that verifies downloaded model and dependency files against pinned hashes before they are used.▼mediumNewGoogleMicrosoftHugging Face◆ premiumPinning a version is not pinning content. The scored answer verifies every file against a recorded hash, treats unexpected and missing files as failures, and explains where the lockfile's own trust comes from.Open full answer →
27A self-spreading worm is publishing malicious versions of packages you depend on. How do you respond?▼hardNewGoogleMicrosoftAmazon◆ premiumShai-Hulud showed that a stolen publishing token can turn one compromised maintainer into hundreds of poisoned packages within hours. The response is part incident handling, part credential hygiene, and the prevention lives in your CI.Open full answer →